Routers sit between a network and the internet, and many run for years without an update. That makes them attractive targets. Published flaws in common consumer models include CVE-2023-1389 in the TP-Link Archer AX21 and CVE-2020-10987 in the Tenda AC15. Each entry lists the affected versions and links to upstream references.
Find out what you have
Check the label on the device for the exact model and hardware version. Then sign in to the admin page and note the firmware version. Hardware revisions of the same model can use different firmware, so the revision matters.
Update the firmware
Download firmware only from the vendor’s official site, or use the update feature built into the router. Turn on automatic updates if the router offers them.
If the vendor no longer publishes updates for your model, the safest course is to replace it. A device that no longer gets fixes will stay vulnerable to every flaw found from then on.
Reduce what is exposed
- Turn off remote administration from the internet unless you truly need it.
- Change the default admin password to a long, unique one.
- Turn off UPnP and WPS if you do not depend on them.
- Use WPA2 or WPA3 for Wi-Fi with a strong passphrase.
If you think a router is compromised
Signs include changed DNS settings, unknown admin accounts or unexplained redirects. Save the settings for reference, reset the device to factory defaults, install the latest firmware from the vendor, and then set it up again by hand instead of restoring the old configuration.
If you find a new flaw in a router sold in Bangladesh, please report it privately.